#
# Description: allow ramfs/cramfs initrd bootstrapping from unlabeled_t
# Authors: Colin Walters <walters@verbum.org>

# Operate on unlabeled files.
allow kernel_t unlabeled_t:file_class_set create_file_perms;
allow kernel_t unlabeled_t:dir create_dir_perms;
# Allow running scripts and such on the initrd.
can_exec(kernel_t, unlabeled_t);

# Mount permissions, stolen from mount.te
allow kernel_t unlabeled_t:filesystem mount_fs_perms;
allow kernel_t unlabeled_t:dir mounton;
allow kernel_t proc_t:dir mounton;

# Operate on tmpfs.
allow kernel_t tmpfs_t:file_class_set create_file_perms;
allow kernel_t tmpfs_t:dir create_dir_perms;